GitHub URL Repo-Name Path Traversal Probe via ?url= Parameter

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•0

Detects path traversal injection attempts within the 'url' parameter targeting GitHub repository URLs. The rule inspects web request query parameters for various path traversal techniques, including standard dots, URL-encoded patterns, double-encoding, null-byte injections, and common file path indicators like '/etc/passwd' or '/proc/self/environ'.